Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: 47GSojzCEEO+cX7McYjJ1jeruwY9YJXXkuG7ErG6WGY=
Subject key identifier: 14:44:4E:AC:46:C4:2C:97:58:D8:81:18:94:84:1E:40:84:34:02:CE
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 019687DB65362EEF243DB333C76322680E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 1515
Signing time: Wed 30 Apr 2025 18:00:24 +0000
Manifest this update: Wed 30 Apr 2025 18:00:24 +0000
Manifest next update: Thu 01 May 2025 18:00:24 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: rKBVM3MjTfac3VPGkUVnTJlydKyvwkUZAQEg240c+hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:65:36:2e:ef:24:3d:b3:33:c7:63:22:68:0e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Apr 30 18:00:24 2025 GMT
Not After : May 1 18:00:24 2025 GMT
Subject: CN=14444eac46c42c9758d8811894841e40843402ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:26:86:91:1b:c1:9a:84:2e:26:b9:75:07:
21:04:c8:89:1f:05:91:60:7f:3a:45:27:06:ba:a1:
29:ba:bd:3c:d9:ed:d6:9b:3a:a3:84:86:ff:dc:b7:
c4:e6:08:68:f2:36:74:66:26:8f:d2:0a:38:b7:0f:
70:8b:3c:24:55:34:2b:1e:9f:ba:55:22:48:00:18:
e9:3f:30:cb:a2:f4:b5:bc:82:e1:ad:c7:bf:55:6a:
f7:18:81:a0:ae:ad:89:77:70:37:e8:23:57:47:11:
c2:bd:8a:37:41:15:f8:60:5a:12:ab:fa:f4:bc:9b:
99:d9:9a:6f:42:3d:e4:77:a8:a3:58:21:90:ee:aa:
c8:3e:da:1c:b9:1f:62:b0:48:e3:42:5f:78:33:fe:
1d:f9:16:48:4b:4e:34:25:7d:cf:f1:4c:bd:3a:ca:
27:66:1f:28:90:dc:f8:3b:a3:89:29:70:7c:a6:60:
63:d6:e2:c3:a4:12:b3:ef:83:dd:d3:86:71:56:79:
b5:18:7e:18:45:08:c8:69:0c:91:d5:b4:71:c2:e7:
cf:b2:16:8d:07:73:53:c0:e6:ed:d9:98:bc:20:d7:
af:d3:98:7e:b0:bf:4a:87:a8:eb:db:c7:67:bd:bd:
53:80:ed:45:da:18:96:78:15:87:8c:8b:d6:e9:ac:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:4E:AC:46:C4:2C:97:58:D8:81:18:94:84:1E:40:84:34:02:CE
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:23:b7:43:ca:91:29:36:51:1e:fb:e1:6b:28:72:6b:c8:bc:
e8:9a:e4:94:3d:30:95:d9:f3:08:e5:57:b9:35:d8:3f:e0:73:
26:fe:e0:bf:8b:05:d2:0c:d5:a4:0f:8a:96:df:57:09:89:71:
82:90:32:9f:0e:72:99:eb:95:ea:c5:01:91:82:22:bf:c9:e5:
ec:a4:54:26:92:e2:c7:7a:29:0c:6c:4f:8d:b6:d1:d7:c3:d1:
09:ad:a4:4d:16:c9:a3:23:03:1c:d5:2f:f8:d3:c3:d6:ab:fd:
b3:19:46:fe:5e:54:ef:48:8e:a5:6d:77:09:f0:91:03:d0:28:
34:1f:49:14:19:2f:85:f0:00:96:b1:a5:64:35:a3:f3:b8:2c:
3e:9c:9f:ac:d2:ec:39:47:e1:da:c9:d2:4f:33:80:71:3c:a9:
94:ed:31:13:2b:ac:70:0f:0b:c1:36:f1:a7:4f:64:f2:fd:91:
23:d2:3e:28:5a:32:07:c7:c4:5d:1a:c6:cf:15:9f:63:ea:88:
4d:7d:42:a0:dd:4c:c1:08:32:02:14:b9:37:7f:49:6d:ff:50:
ec:1c:83:0a:a0:43:5f:b0:c4:be:27:5e:96:9b:ba:21:80:9a:
2a:a2:fa:d9:c9:e8:86:26:46:30:a6:63:a4:da:d8:b4:df:6e:
e0:08:4b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:58:01 2025 by rpki-client